hxxps://google[.]com

max time kernel
1800s
max time network
1689s
platform
windows10-1703_x64
resource
win10-20230831-en
resource tags

arch:x64arch:x86image:win10-20230831-enlocale:en-usos:windows10-1703-x64system
submitted
19-09-2023 16:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://google.com

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ProcessHacker.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	ProcessHacker.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133396130382822959"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3540700546-2554825161-2349363825-1000_Classes\Local Settings	chrome.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4504	chrome.exe
4504	chrome.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4656	ProcessHacker.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
636	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 49 IoCs

pid	Process
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe
Token: SeShutdownPrivilege	4504	chrome.exe
Token: SeCreatePagefilePrivilege	4504	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4504	chrome.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe
4656	ProcessHacker.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4504 wrote to memory of 2948	4504	chrome.exe	53
PID 4504 wrote to memory of 2948	4504	chrome.exe	53
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 4128	4504	chrome.exe	76
PID 4504 wrote to memory of 436	4504	chrome.exe	75
PID 4504 wrote to memory of 436	4504	chrome.exe	75
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72
PID 4504 wrote to memory of 2156	4504	chrome.exe	72

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffce8aa9758,0x7ffce8aa9768,0x7ffce8aa9778
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1856 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3016 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3008 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:8
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1760 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1600 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4340 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4836 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4344 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3260 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4484 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=5448 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5144 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4536 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5432 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5876 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6128 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6344 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6348 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6364 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=6272 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=6568 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=6572 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=6604 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=7476 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=7640 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=7876 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7136 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:5688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=7044 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6728 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:8
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=6284 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=3232 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5976 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=5468 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6232 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=6516 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:6088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=3640 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=6328 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=6920 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=7932 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=8040 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=7908 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=7928 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=6800 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8068 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=3192 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=7944 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=3164 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=7560 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=7924 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=3400 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=5972 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=6152 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=3460 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=6868 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=6904 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=4988 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5240 --field-trial-handle=2116,i,11999695050996844350,14030458761534549339,131072 /prefetch:2
  2⤵
  PID:1620

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:204

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5792

C:\Users\Admin\Desktop\ProcessHacker.exe
"C:\Users\Admin\Desktop\ProcessHacker.exe"
1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\46b8a9a5-4e95-497d-ad19-d5fd32311ab2.tmp

Filesize
6KB

MD5
d0dce20c5e05c4d3d4a4176e242996c3

SHA1
e6b643daff1cee3837310c947108110768e81e34

SHA256
1cff21294ca9594853eeb3645218550288a62f2657c43785cdc92f63efa90f58

SHA512
29f49411a53aa5a9bbb9fd5f50625404fe402fa83baf73d783728a49e272ef751dba26790f00a0fde3f5fe1339681a6905006f8c3bee42cbef66ea973521e94b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

Filesize
40KB

MD5
d574939016c1b0511053c934958d9a25

SHA1
1ebb35cd6af10fce71dcd4778c9bbcd9822ef999

SHA256
ad0ad0fb63aff674e004faa8c826d6523a79532133fc07eb9a2ee5a1d367ec66

SHA512
48758079cd42e05da63126f5119d15a4f79520095d062b67490b637df8fc12d567eaa2ec9c083d747093fbefedc651fbb3a2bc4f2fbbab9b5a09379626a40ceb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

Filesize
109KB

MD5
174dda98f61602a35a0a419b8ce3a094

SHA1
79250a1cd5997e18eb36d2327edb8e93eeb217da

SHA256
85a80c04d61678ed3114a24826758fdfb142bd10df5f9c561191987f120a02a8

SHA512
097ec0a5442de753167c538f4fddf40610d4c007fa9a28b5365904cbd676646834f8ea4761f9e81bde8fa18a3192ceac2d7b58e8a0d6321276948feb2510acdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

Filesize
71KB

MD5
035ef6eaf7accadce25b54de51a58b43

SHA1
6622e6858ee1349437d58c29fe821390c27cef41

SHA256
c29fd8d1af7a65a8ee253f331922fe84445b275926596fcefd3d2fcc02bf842a

SHA512
d6a21d79e3f10a9c4ad0b1d0294922a90a8485170e514129b71eb0c287925d6a80b8c4d5e246faaf86964ffe4841aee78a8fb7a3b6c5d4f6fb0a82a73dfb69ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000024

Filesize
24KB

MD5
5366c57b20a86f1956780da5e26aac90

SHA1
927dca34817d3c42d9647a846854dad3cbcdb533

SHA256
f254eb93b015455a3c89aaf970631bc989fe2bd387f79e871b514992359651aa

SHA512
15d7127970436f2510344600f3acecc19c39a05f8e82c8a7950095386382b2e2da55883a5a9faa97b84452e67315b9ac1693b6592274c8c1c35c813dfeb543a2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025

Filesize
40KB

MD5
7ee2ea0d563d2d9ef45960a2c8b53380

SHA1
442b1df826f8be92a859b6230c123cb2a1ba968f

SHA256
1f44b24f311ee1666c6c950d7db094a044796add137f6225d93be283b3d80ff7

SHA512
0bcd922c8d8eb07d7e1bb2a0649b0d00671d82ae38d1dc45798bb1bc2c3e06a4be831a134e980d6b5b58530ab564357a47169938d3e335b8d9f0e1aa2e0346c6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

Filesize
24KB

MD5
344ee6eaad74df6b72dec90b1b888aab

SHA1
490e2d92c7f8f3934c14e6c467d8409194bb2c9a

SHA256
a3cf4861c7d0c966f0ed6564f6aad6b28cbd3421a9ca4f60e2246848d249f196

SHA512
2a9a9162d610376512a8fae2cf9eb7e5146cc44c8ebde7a12e9a3985da1718c62ae517c25b00de7c0269efab61b4850a0becfbf04382a25730dbe9cf59825a62

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

Filesize
62KB

MD5
810be116ee36d00b3bbf33aa994c7dcd

SHA1
085da619365033eb9a01dc1c35b6d32dfff9e614

SHA256
aa9aac912cf5980e2500cd29190cacd6026746fa0d7dc2b15f3942bde732d2ce

SHA512
e911307b708f9394ddfdf3c9166fe6e2f389568744c5871b8c938141d8b1269c44be153e88026b9f81965689163de5d522bf8607d4587b570f23bb74506d01e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

Filesize
83KB

MD5
ee66c4b6726cae5bb0ec73a2a4163f16

SHA1
c6c7379913906407eb2de2e490030c75bfc80e8e

SHA256
fe042321b5ff4450c96e3d6d7050a4d15b70b4cb52a370a32a19d66649b083a6

SHA512
1d7678993355f8ff401856836ba45fdbbdc0c38a907ff00575804a0b3279573ca79e60767eecabb9f9d6ed5a4c95834d2ab89078f451f7851194f88f395387fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
28KB

MD5
855222a396e632441f2501530e9009ad

SHA1
de40702e042e8e9dcb380f5ca41436d4545b11a3

SHA256
1b96a28c9fc7f82ff99da844351cc7d6a11c61ecf8c6b22bd9c21a4a0c41df77

SHA512
f906472a2a4df15600457d088983450ee30f7c3bc376c227ef3537df23290eed58f5a2d3764af064b1c28cc98fdb9e269e0b57fd83ad0ad5dfe59270cd66b7db

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

Filesize
42KB

MD5
e6b7a2692ef1510eaebe65bbeb388a92

SHA1
ae67eccd1c6af0c18efcef4402d2a957956c842f

SHA256
9cdab2241d9837a44fa5beaa97caa50cee9da2e0b0d646aa46463f1f9f065d29

SHA512
8f00fd51aecfd0adeaebf0c9d39f2e8478e6fc8ae98fd2f548e49aea96bc9bc20f2430ce536e113c58fa6b82e36ad16e771a95447be637984ae32ece58a675c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000030

Filesize
128KB

MD5
97a860476b55a60ff5506a80593df54b

SHA1
cb67db62ae8e9e2dd826a425f6cdef35a57cfd36

SHA256
8b374f3c2cfc86a127d2872a2d68b2cc41c723f75732d462d7e6c93306e18e2d

SHA512
e344c2dc00bcaef4ceaa1b938e61529208309babdbebb82f7ee87d6939c7c5d4540f38e4878c31c2377a7c4e9fbfdb923624546c6b974d1839d819bcaa75c276

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000031

Filesize
63KB

MD5
34d5015941e4901485c7974667b85162

SHA1
cf032e42cf197dcc3022001a0bde9d74eb11ac15

SHA256
5c166a5d40aeefd0679a14f95e47ff28824e66abba82adfa30be41803cc25632

SHA512
42cef1d6847f535a6e8afc0469b9f5ef79ce4ab21512ac7eeda8ef9667d5f24bb33b30aba9a29824b3d853d41d4addf6bdee2042cf4fbd0a033b61657c671f0c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

Filesize
92KB

MD5
554706b0fb848dbdd58054e4c97f78bc

SHA1
2a5320021f3aecc50e41c2d2fbe460ec96958736

SHA256
06f98bc7830a52ad61d6f2c4f9730008182cfe8a0fe2b4c1314b805c9f681f19

SHA512
480c084c715f00224c4345970ece9c2a80f3d7d0645470b7e587617c84f5960bd6ef939449c57b4fc5ab44167c7beb6cc78f43a78f23a5729c13358692c3fbcb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
9307261fd65afd8c4a9d3a6f17f8d82d

SHA1
c8f5d87108660319a4ca676006a931857aabb373

SHA256
76149585d15043679ad7fdf841427a6b039d1e2e9a516e24ac910701dde330e2

SHA512
18a166dd836687dadc3930de8192f911d2b880af1c18101ee047151c74fc308cb886efe75bbf26bffd5c2d4cfd547df90ae530ba472aa7606c6dfed351adc7ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
3165a415043ab9dbbc892d98781d7aae

SHA1
c7f80679da2cc1e9fcc20c92d09c93df6bbff14e

SHA256
d3dc61568cc6d31568759eeb0957898bfcaeb22983b2c09baceb457c3d7ded6e

SHA512
fa31ea2e1f7f65718b02ae6154d49009499f59561973810078b6d1fc24004ddc2d3150f4687922cac085a0e2759420398cc54a19630d4fef98491b77c6eaa75f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
ad188848fd1fceadb0654b504c412df9

SHA1
dc357ed5e8a08e77b3e0772e9082d72d6a02d915

SHA256
7597110d42be62bd74710a444e71144e6e1bfe4a11acc0dfd4bf4c276f3b473a

SHA512
09f1f068a7c61d2ea509aa5ed77d863dd981b00ecfc32e2fc1a775011c3310a90a28baf7102aa2642360c868c2cd3c23d43f0d58859135dcb3f2b8702277a4d8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
14KB

MD5
34fb5e8ba1f5cc01200fe15cdd7fec98

SHA1
44a18eb43b45f73119bcf3b22ea656baba33b12e

SHA256
95fd41c5635ad13cb2d58d02e853737de42b644a59a46f4e6099d98d9cd94649

SHA512
c7736fa2a04ec6b54af235ab3b882bdc6531ca22eba4e7a0bbd7faae17639ae2a889765a5a6680c16a20d396cf65220bf690a37790861acbd557c31d6255d832

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
13KB

MD5
095c1987a32f4f4f516ece9bc8dedbc8

SHA1
dfd19ee33305e3237bd4511ee13d20ca43185ced

SHA256
fe259277664652209ea1621520756df0d0d8e0dec13311ce922e45db58989c9e

SHA512
f539816d23880d6f06a7620be0764b3c440a3880e3ad39ee7d75340ed189555b0e022d03b762f242a41d24b965468a7c5778db8e0b372cfbd053c1f742a30c7d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
5991288ebc5231e3a6a7c85cff759555

SHA1
59a8610f121eb6fc27ab3eb3e517320e3500c8c2

SHA256
e1d1e542d18d326c205893712d7bd37695a8cb058b60618cb91366092c41772f

SHA512
1c6f369ebd5c445f315a2973868791ea7f7bb65e5c5531f910dc9de1feedb5768ddb83472c28a6b0da59512bb0ccc8a8ad72fe772623f1a9a9ba00178c4c8dfc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
ded39f2611b8a8f90c52cc16ce9ebf17

SHA1
553edbbdbcb15e985bb32afba6cd4e45b03f9720

SHA256
ce94ca069c593ff18afb1bff1e83124d7b091bb412bde4969853d9e022d0af0d

SHA512
7385249526b0df21fab0d98fe71bc19cb2f0fe164cd65522aee4aa2809b722a31cdf4d909e43ee8253b961e60a5d76a2e8d8403fb9432bdd5bd41eaca39d0263

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
acea2e859ce225e8410933dcd4114d5d

SHA1
3fadc012373515f81fd003bf5b8c097e40e7c468

SHA256
abe23a670c6835f47bc6e34ed725cb8a18c36ece4844cce31b5d8980993dde43

SHA512
fdaf966ddca9667ca1e29523e0326678570190ed3b9bc3acf5e6c965bf34908ff78cf556a54e9e72fe57a4bb0cfd121622bafdff123265d1fbdce7d2b6dd35c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
9aa13392c32b03ad4edac45a435bab7e

SHA1
8fe8f7afd5ace055d233b2fdc256686ccfece9ca

SHA256
eaa7c8ecfb6cb2c266f2ceea292fae5b573fa246b1c95700c005b217e28230ce

SHA512
153d2c9f7b9322eeb09ad3872e600dd9572a421887a83459b9493016e0b166c232e1b15df63bc4dc24f8d7f72e808391f073a10bac705bdcb9f1234e9dc092c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
539B

MD5
6a0b652bf7ae6b7f95c2d77a5d4b7b74

SHA1
0d7e5675bd57a76181649de3eb24835d14b16677

SHA256
798811e06e56bfedfe07270ba6d3d86837ce2602ed64f0843c5b011001667602

SHA512
d6874221f5420947231ad68e1a5e5a2202dfc4ada1d9eac1903fd19d718841311102163ba2a77db47775159ae6289c91e2ca6fa6ecc31cfc703637378e1e3ca7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6eb32b77640a24e931874859a16c91d6

SHA1
4c8261487204c8c9b7d1e5af471c552b7dd33484

SHA256
12479d677ee91d762513f078f8a516967ee03921231620db712e01e9bba4d48d

SHA512
6bef0fe2194d8c2d130ec42b84bf7a3fa6ec431ad409e0948b71816dab2ba0276936139cbcbe6574e2fe9dab699c98e164adf79f7551f33791f5c398d904c73e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
aee91824138f9dbbec19518ca2a8a48e

SHA1
3fa90691538a729dfb43e99f60e99e6d3ff0d0a4

SHA256
c021b4ea42c73df663693ee1b8b674a4c67108fd858d82c45438c2b19033ac8d

SHA512
da8a75d1d1d3f1c3a8883abaffade4bf7b249a04a991981527833db773799240f3883d7fa62679b8efbf20578fd019a1d2f7e3cd6ff6019c183e3660b4207432

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
506e4deb5daf3087ba52026625f331f6

SHA1
6bf2a3e47319b71c595169afcb467f74f0c4d7b1

SHA256
4e89a6303b0a3d4cadb8444a8ab8a6cd3e4140fba377d7a063814dd1fab63afa

SHA512
7dd2a9acc3e5063563808bea00a0cd5a21626f1ae5f9209ef9a4edadbdd4c9dd85cf70efc21914062a7e157d21eb7fe5017d2a085b06865cd968a1f746beafc2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2cd84f24a711c23929dd76e4a667b66c

SHA1
4dbb33f1dba4eb7b3bffe22b625bce711661fbf3

SHA256
668aafbf8d5b29e1477128b0da1de58e41d75861f4661791d579bdbda3b6a8db

SHA512
0675a2693b23bbac7a8f346563bafe05caade1870f0c6feb35455d3572fe80a6a01af937f9e4440215d2aebcc035a3d3796ccd129da557c59ccede4152b7eddc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
47590572865f2772a3bc01f6f0911a01

SHA1
50909c31d0819ec107030d9e22263d5086346aae

SHA256
438a4da9a446cff46dcbe41618c61b8fac93cb8ba7ce12c5474c41b06592b619

SHA512
59534e82208d67972dcc042051ee043454996de9792fc58ce0ce29ebcd37b42f0d7a13b9cbbd4a85c204c078cf7b92fa9a2902748bbc95e8c6fc6fec469be0a2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
949b54fc5fd5e4af72fbeef7737a7c2a

SHA1
54239c3d655a97b227dd43100e7a835ccb34bfe6

SHA256
9fcb820634d3c3816fa5d69e7156ed9ea87ed3c10f9bc81a22401890f29fc1d9

SHA512
986ce02764c1e2ad50fc9c1792a630cbdde349295ca899c65978c66607d20242249c8c80c8b9984894e236820e877241dc554fbc313ffbf1caf1f974cbba6e3c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
97KB

MD5
45f6328cdb72ffd6faf10de4c4fe7da0

SHA1
23dfe96022debea8d94d41f51633c512530d33b8

SHA256
dfcee240d9f7ffd47c1e593fe1c9c52a28b88af0aa7e4a124e9c2c9ea6ed3228

SHA512
7facb656502642114e4ceae212265473d426230969e28c068d33dc8414e6f8bd334f92a8365ab5c7c65f47cb58a913e87f9a33b1714f226c86eac7e6abcd90eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
97KB

MD5
bcf67192cab75363639df9e99ed92273

SHA1
88050b786dffd977ba9ff285f8c53789ef3a0332

SHA256
30adc1bea70d7c27882f4c3b2fcd20932f9520704ef0bb241b9cd9a3d07058ad

SHA512
f2e5439d99cb464c6c2a6d484a2c5bea89cd13299d60c0c381bfcfb9e88971b456d714181811d156afd4c04800bed885bf0eb9f05b651c6dd485b97e6d67a514

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
111KB

MD5
912af767d13974f9bcefe142453e9df4

SHA1
e5a33a1b43a00465c1564ddf0919084948ab3a67

SHA256
fe8abc75aa26332550611ef941164889808a35720fdd0c444dc4e746f62c147a

SHA512
b5fe5f81774757ea7ae89045643e42389e8689c5757fc6e167469cd71d09453b281168ff1e24594a2ef8c2b356de1dbb3d923936e0d66c931fb342c9bdb038a8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58f8c3.TMP

Filesize
93KB

MD5
fd9a864b26baa97022b8d9d515360e6c

SHA1
c536d6659713df7f3b4e41166e065d0753c0f705

SHA256
1f25419d09b5ec66986b02a20fd294dc40f172883e64b76d5b170d2e491a696c

SHA512
07f172d5d299228ceb39f3337cae4e967c28bfd36fe8ce25510a3a628ef57974e3a80ff94e2931f78bd3f23057c825c730d52b6aa88d259165af480810e48601

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\Downloads\processhacker-2.39-bin.zip

Filesize
3.2MB

MD5
b444cf14642ce9b8d75e079166a5df0b

SHA1
8e8f8423d163d922242b8b7d85427664f77edc97

SHA256
2afb5303e191dde688c5626c3ee545e32e52f09da3b35b20f5e0d29a418432f5

SHA512
915b9f7c0b1374ce52fa9653ba1084741d15ff79dbb7c04d2a0f41eea8262b2f556d451bf9eefbd2d32831289908b6a1b39ce2cbcafbbfc4ae6e71d701b1aa81

Download Submit
C:\Users\Admin\Downloads\processhacker-2.39-bin.zip.crdownload

Filesize
3.2MB

MD5
b444cf14642ce9b8d75e079166a5df0b

SHA1
8e8f8423d163d922242b8b7d85427664f77edc97

SHA256
2afb5303e191dde688c5626c3ee545e32e52f09da3b35b20f5e0d29a418432f5

SHA512
915b9f7c0b1374ce52fa9653ba1084741d15ff79dbb7c04d2a0f41eea8262b2f556d451bf9eefbd2d32831289908b6a1b39ce2cbcafbbfc4ae6e71d701b1aa81

Download Submit